$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa File: 3a019076-b464-3583-90a4-8ee571e8d49f.roa (raw, json) Hash identifier: It1jdZNjX2EmjeHjenM4FTqs9VdwTbD248sWxOxlmSU= Subject key identifier: 56:69:25:99:5A:91:9B:29:3A:5B:13:60:41:43:88:3C:33:AB:E1:A2 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584AF5214CFB16F23E2409EC6580 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 393474 IP address blocks: 64.90.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4c:fb:16:f2:3e:24:09:ec:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=d2233d2a-4f27-4cc3-813d-c5e18eba612f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:32:f5:c0:e6:62:74:8f:6d:c4:20:eb:40: ff:c3:72:f5:35:21:2d:29:4c:d1:a7:8e:00:5e:58: 11:28:1f:b4:f4:40:61:e9:67:f8:14:36:0d:76:94: 30:ee:b0:18:ff:59:5c:5e:59:55:4c:6d:7a:e5:17: bb:63:86:01:e3:a2:96:b5:53:fe:08:6e:ba:c7:36: a6:6f:8d:23:b4:62:b8:5d:49:af:1b:70:3e:82:9d: 3d:3c:79:05:4f:ca:7d:2b:5d:31:1e:a7:21:11:40: d2:fd:69:02:28:de:1f:2c:b5:2e:26:b7:8a:2f:43: 82:02:a8:cd:bc:80:e4:72:2a:17:b8:42:e3:8e:67: 8f:75:3c:d4:43:2d:a1:f1:90:51:68:01:cf:be:79: c8:96:be:d8:89:91:15:12:c7:56:7f:9d:72:ab:ce: 57:db:ee:f1:2f:d5:d9:42:9e:2c:c3:91:3e:1e:56: 94:b5:a7:de:b4:d4:10:c8:de:b8:9c:9c:9b:e4:37: dc:aa:e0:d8:8c:0b:a2:af:67:71:cd:f1:3e:d3:2d: 26:0d:36:d4:81:b7:98:1b:7a:04:bc:4a:e2:70:a4: 2b:1b:7c:72:72:77:f5:61:40:23:82:62:a3:8e:0a: 32:34:e3:e6:04:b8:55:7d:39:42:fb:42:16:0e:49: 4f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:69:25:99:5A:91:9B:29:3A:5B:13:60:41:43:88:3C:33:AB:E1:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:bd:56:f9:4a:45:4d:f7:e6:06:20:fe:14:b2:fe:0b:fd:de: 7e:16:16:2b:8e:f7:c9:c1:33:41:8e:b8:ab:7c:38:db:0a:d6: b9:d1:fe:59:88:39:f2:7c:ae:6d:4b:d8:e0:bf:af:0e:51:41: 30:6f:2a:76:e4:47:bd:d3:d8:4d:db:95:ce:6e:63:91:bf:6c: 35:c7:f1:5d:e5:a0:21:4b:e5:58:c2:70:05:7c:0a:aa:e7:14: bb:9d:df:2c:f5:87:f3:07:c1:03:0b:64:ab:5c:6a:3e:77:1e: 25:d1:d7:72:10:89:9e:93:f2:86:96:c8:93:76:1d:3e:0c:1a: 5c:b6:44:40:1d:a0:61:1c:32:3d:eb:9d:ea:3e:6a:f6:e9:04: 66:20:3d:23:00:3f:58:8d:6f:f1:31:75:85:89:9d:0b:a2:27: 5e:5b:50:68:d5:3e:7d:f5:8d:ab:ba:3b:c4:02:1b:ae:d3:46: ec:15:c1:ca:d3:f5:52:fa:2f:d4:26:46:e7:0f:cd:13:4e:2e: 4e:ca:0a:22:b2:f8:27:48:98:98:00:be:82:de:0a:b8:67:6f: 31:f0:65:25:b8:59:d9:e7:35:c4:dc:7d:55:26:f3:d5:ac:a0: 80:91:0f:c2:dc:c9:b4:9d:8d:30:41:cf:76:0f:7d:60:b2:6b: d9:94:40:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUz7FvI+JAnsZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDIyMzNkMmEtNGYyNy00Y2MzLTgxM2QtYzVlMThlYmE2MTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomEy9cDmYnSPbcQg60D/w3L1NSEtKUzRp44A XlgRKB+09EBh6Wf4FDYNdpQw7rAY/1lcXllVTG165Re7Y4YB46KWtVP+CG66xzam b40jtGK4XUmvG3A+gp09PHkFT8p9K10xHqchEUDS/WkCKN4fLLUuJreKL0OCAqjN vIDkcioXuELjjmePdTzUQy2h8ZBRaAHPvnnIlr7YiZEVEsdWf51yq85X2+7xL9XZ Qp4sw5E+HlaUtafetNQQyN64nJyb5DfcquDYjAuir2dxzfE+0y0mDTbUgbeYG3oE vEricKQrG3xycnf1YUAjgmKjjgoyNOPmBLhVfTlC+0IWDklPYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZpJZlakZspOlsTYEFDiDwzq+GiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvM2EwMTkwNzYtYjQ2NC0z NTgzLTkwYTQtOGVlNTcxZThkNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa9VvlKRU335gYg/hSy/gv93n4WFiuO98nBM0GOuKt8ONsK1rnR/lmI OfJ8rm1L2OC/rw5RQTBvKnbkR73T2E3blc5uY5G/bDXH8V3loCFL5VjCcAV8Cqrn FLud3yz1h/MHwQMLZKtcaj53HiXR13IQiZ6T8oaWyJN2HT4MGly2REAdoGEcMj3r neo+avbpBGYgPSMAP1iNb/ExdYWJnQuiJ15bUGjVPn31jau6O8QCG67TRuwVwcrT 9VL6L9QmRucPzRNOLk7KCiKy+CdImJgAvoLeCrhnbzHwZSW4WdnnNcTcfVUm89Ws oICRD8LcybSdjTBBz3YPfWCya9mUQCk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:37:27 2025 by rpki-client